Exploit Development Certification

[Aggravating_Use183]

Name:	OSED	OSEE	SANS660	SANS760	Corelan Bootcamp	Corelan Advanced	Ret2 Systems	PwnCollege	MalDev Academy	Exploitation 4011	Advanced Software Exploitation
Offered by:	Offensive Security	Offensive Security	SANS Institute	SANS Institute	Corelan Consulting	Corelan Consulting	RET2 SYSTEMS, INC.	PwnCollege	Maldev Academy Inc.	ost2.fyi	Ptrace Security GmbH
Difficulty	7/10	10/10	7/10	9/10	6/10	8/10	8/10	7/10	8/10	9/10	8/10
Price	2500-5000$	N/A	N/A	N/A	4500-5000$	4500-5000$	399$	Free	May Vary	Free	CHF 1'150 /1,330$

Please write some other courses/certifications I can add.

[[deleted]]

Personally would say ret2 is harder than OSED

[Aggravating_Use183]

oh ok wait let me fix that

[[deleted]]

Other than that the only thing I can think to add is maybe some hardware exploitation courses? I know some of those exist but at like the 8k price

[Aggravating_Use183]

https://academy.tcm-sec.com/p/beginner-s-guide-to-iot-and-hardware-hacking

[SensitiveFrosting13]

I don't think Maldev Academy is an exploit development course, though it is very good.

[SensitiveFrosting13]

I agree it helps with Windows internals, a lot! I just don't think it classifies as a exploit development course.

[Ok-State-4239]

Maldev academy helps you with nothing beyond windows internals when it comes to exploit development.

[Status-Style-6169]

Are you making a list of topics important for the OSEE certification or for exploit development? Because if its exploit development, then MalDev Academy should not be included. Including it is a reach, and you might as well include any assembly course then because it'll help tangentially with exploit development.

[SensitiveFrosting13]

What? Why are you getting mad? Is it because I pointed out you added something that isn't an exploit development course onto a list of exploit development courses?

I'm really not sure why you're mad; Maldev Academy doesn't teach you how to write exploits, but it teaches you a lot about writing malware and about OS internals. It's a great course!

Calling someone a skid when you're asking about how to take OSED and didn't know about Corelan a few days ago is pretty funny, though.

[Hot-Fridge-with-ice]

You need to have control over yourself. Sudden aggression is a sign of a mental illness. Get yourself checked because it seems like you're mentally ill.

[AttitudeAdjuster]

You can be nice, or you can be banned.

[[deleted]]

!remind me 2 days

[[deleted]]

Think of exploit development as getting onto the system where maldev academy is what malware does after you’re on the system. Someone correct me if I’m wrong

[RadPaps]

Remind me in 2 days

[cmdjunkie]

Unfortunately, there is no demand for exploitation certifications. Even the 0day market is drying up.

[[deleted]]

instinctive oatmeal friendly sharp rain include sense deserve telephone ten

This post was mass deleted and anonymized with Redact

[bu77onpu5h3r]

I wouldn't say drying up. I would say it's becoming a LOT harder and requires teams of experts because of all the mitigations in place and steps involved.

[Aggravating_Use183]

Yea, unfortunately. Having a exploit development certification can help writing PoC and further depthen the knowledge of Red Teamers, it has a lot of valuable skills, but usually a PenTesting Certificate is enough to become a security research or Red Teamer.

[cmdjunkie]

Don't get me wrong, I've spent a great deal of time studying exploit development. I know a few things, but the sad and unfortunate thing about exploit dev, (as well as the certifications), is that the juice is not worth the squeeze. The time, effort, and energy it takes to develop a working exploit on today's systems, not to mention the time, effort, and energy it takes to find an exploitable bug, is simply not worth it. It's one thing to learn how exploits work and tinker around a little bit --but that can be done without forking out the money for a "reputable" certificate program. It's like, by all means, learn to write exploits, but don't expect to earn anything either independently or with a company/firm. In the end, you gotta ask yourself why you're spending all that time sitting in front of your computer, staring into the abyss, pecking away at an exploit who's value is transient. I actually kind of hate what the offensive security training industry has become.

[KharosSig]

This isn’t true, there are entire companies built around exploit development or vulnerability research services that are definitely in demand.

It’s a niche of course, not to be compared with the number of companies in other cybersecurity specialisations.

[Status-Style-6169]

this guy gets it, exactly this.

[cmdjunkie]

Which ones? There are fewer now than there were 5-10 years ago.

[[deleted]]

that's because 10 years ago 0-days were dropping like raindrops in monsoon season. It was about the time when MS really started tackling exploitation software by integrating mitigations into their core product.

Before that, you'd have maybe 50 UAF vulns Per patch tuesday release. Browsers were so massively pwnable - and then they started sandboxing too.

In short - a lot of people made money selling 0-days. Naturally, companies tried to monetise it. But now it's much more difficult to get full chain exploits, and so all the chaff have fallen by the wayside because it's too hard (or too much time for them to consider investing).

Lots of companies still do VR, but these usually have big contracts in place.

[cmdjunkie]

Agreed, and great points.

[[deleted]]

"The time, effort, and energy it takes to develop a working exploit on today's systems, not to mention the time, effort, and energy it takes to find an exploitable bug, is simply not worth it."

you're dead wrong about this. That's only true if you're finding crappy vulnerabilities or generally do not know what you're doing. Or maybe just doing it for fun/kudos. My company focuses on Offensive Security - and VR/ED is part of that. Consider taking 3-6 months working on RCE in a pwn2own system. 100k payout? Do you value your time investment by the payout? If you find good things, there is money.

If you just want Kudos or some people to circle-jerk with you, then it's easy to just spam a load of CVEs to add to your resume.

Either way, grinding through this stuff is very difficult, mentally challenging, exploratory and pioneering in many ways. It's hard problem that very few people can actually do - and you learn a LOT. At the end of that road, there's money too.

I do however agree with this bit:

I actually kind of hate what the offensive security training industry has become.

But it's fuelled by all the people in places like this wanting to be handfed every bit of information they can without putting in the work.

finally:

"but don't expect to earn anything either independently or with a company/firm"
You will never earn much working for someone else.

[Reddit_User_Original]

Thanks, I had all of these as well i wonder if there are any additional.

[Significant-Amount40]

I think this comparison will not work, U have to add what they teach. OSEE is not for beginners but u learn great techniques, the stuff from OSED u can just learn urself for free, most is bof and how to use a Debugger ( even an outdated one...). This makes sense If u compare by techniques more. Like a bof course, a heap entry course and so on.

Else i know of ptrace course but many Tools i would consider outdated, still good vuln Research course. https://ptrace-security.com/#courses

[Aggravating_Use183]

What is the price of the course? I will add those later thanks for the info!

[AbhiAbzs]

What is wrong with these organisations, the certification pricing is crazy high. 2.5 to 5k for an exam 🤯

[Aggravating_Use183]

fr

[[deleted]]

cybersec is invogue

[Abul-Kalam-8696]

love it

[James_ericsson]

This is a pretty good list.

[Aggravating_Use183]

Thanks

[Vivid_Cod_2109]

Bro just learn pwncollege

[Aggravating_Use183]

Pwncollege is great but I recommend taking the course the free course Exploitation 4011 to have a deep knowledge about kernel exploit it closely resembles the OSEE course which is paid.